hesami/laravel-json-validator
The single-person project has no tests or security policy, and its repository has little adoption or safety tooling. A clear MIT license, matching source repository, and release notes improve transparency but do not offset the maintenance risk.
42%
Total Score
33
78
75
Health Score Breakdown
The package has made four releases, but none in the last 12 months; its latest release was about 3 years and 7 months ago. This is strong evidence of abandonment risk despite an initially regular release interval.
There were no commits and no active maintainers in the last 3 months, with the repository last pushed about 3 years and 7 months ago. This is the strongest evidence that fixes and compatibility updates may not arrive.
Only one registry account can publish the package. Because the repository is also user-owned, this reflects a genuinely thin maintainer base rather than normal organization publishing hygiene.
The package and repository are owned by the same individual account, confirming ownership alignment but providing no organizational backing to compensate for the thin maintenance base.
The repository has only 2 stars, 0 forks, and 1 watcher. Low popularity is supporting evidence rather than a verdict, but it provides little evidence of broad community scrutiny or support.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Mehdi Hesami |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.